公开(公告)号：US20110283017A1

公开(公告)日：2011-11-17

申请号：US12780673

申请日：2010-05-14

申请人： Hasan Alkhatib ,  Changhoon Kim ,  Geoff Outhred ,  Deepak Bansal ,  Albert Greenberg ,  Dave Maltz ,  Parveen Patel

发明人： Hasan Alkhatib ,  Changhoon Kim ,  Geoff Outhred ,  Deepak Bansal ,  Albert Greenberg ,  Dave Maltz ,  Parveen Patel

IPC分类号： G06F15/173 ,  G06F9/455

CPC分类号： H04L12/4641 ,  H04L12/4633 ,  H04L45/04 ,  H04L45/42 ,  H04L45/46 ,  H04L45/566 ,  H04L45/586

摘要： Computerized methods, systems, and computer-readable media are provided for establishing and managing a virtual network (V-net) and virtual machine (VM) switches that enable protected and isolated interconnections between members of the V-net. The V-net members include an originating network adapter that generates data packets addressed to a destination network adapter. Upon detecting data-packet generation, a source-side VM switch accesses a forwarding table associated with the V-net, ascertains a destination-side, VM-switch locator that corresponds to an identifier of the destination network adapter, and modifies the data packets to include the identifier. The forwarding table represents a mapping between the members of the V-net and VM switches located on respective nodes within the data center. In operation, the mapping enforces communication policies that govern data-packet traffic. Upon receiving the data packets, the destination-side VM switch restores the data packets and forwards them to the destination network adapter.

摘要翻译： 提供了计算机化方法，系统和计算机可读介质，用于建立和管理虚拟网络（V-net）和虚拟机（VM）交换机，从而实现V-net成员之间的保护和隔离互连。 V-net成员包括生成发往目标网络适配器的数据包的始发网络适配器。 在检测到数据包生成时，源侧VM交换机访问与V-net相关联的转发表，确定与目的网络适配器的标识符相对应的目的地侧的VM交换机定位符，并修改数据包 包括标识符。 转发表表示位于数据中心内的相应节点上的V-net和VM交换机的成员之间的映射。 在操作中，映射强制执行数据包流量的通信策略。 目的端VM交换机接收到数据包后，恢复数据包并将其转发到目的网络适配器。

公开(公告)号：US20110216651A1

公开(公告)日：2011-09-08

申请号：US12717784

申请日：2010-03-04

申请人： Deepak Bansal ,  Hasan Alkhatib

发明人： Deepak Bansal ,  Hasan Alkhatib

IPC分类号： H04L12/56

CPC分类号： H04L69/14 ,  H04L47/193 ,  H04L47/20 ,  H04L47/22 ,  H04L67/10 ,  H04L69/161 ,  H04L69/326 ,  H04L69/329 ,  H04L69/40 ,  Y02D50/30

摘要： Computerized methods, systems, and computer-storage media for establishing and managing a transmission control protocol (TCP)-based tunnel (“tunnel”) are provided. The tunnel spans between a data center and a private enterprise network and connects endpoints, of a service application, that reside in each location. During communication, the endpoints transmit data packets over one or more channels (e.g., higher-level channel and lower-level channel) that comprise the tunnel. Each of the channels supports reliability mechanisms (e.g., congestion-control mechanism and loss-recovery mechanism) integrally running thereon, for ensuring complete data-packet delivery. To prevent unwarranted performance degradation caused by duplicative efforts of reliability mechanisms, a fabric controller is employed to selectively disable one or more of the reliability mechanisms individually. The selective disablement of the reliability mechanisms is invoked by predefined criteria, such as instructions from a service model or detected identity of a source/destination endpoint, and is invoked on a per network connection basis.

摘要翻译： 提供了用于建立和管理基于传输控制协议（TCP）的隧道（“隧道”）的计算机化方法，系统和计算机存储介质。 隧道跨越数据中心和私有企业网络，并连接驻留在每个位置的服务应用程序的端点。 在通信期间，端点通过包括隧道的一个或多个信道（例如，较高级信道和下级信道）发送数据分组。 每个信道支持在其上整体运行的可靠性机制（例如，拥塞控制机制和丢失恢复机制），以确保完整的数据分组传递。 为了防止由可靠性机制的重复努力引起的不合理的性能下降，采用结构控制器来分别选择性地禁用一个或多个可靠性机制。 可靠性机制的选择性禁用由诸如来自服务模型的指令或源/目的地端点的检测到的标识的预定义标准来调用，并且在每个网络连接的基础上被调用。

公开(公告)号：US07970928B2

公开(公告)日：2011-06-28

申请号：US11958374

申请日：2007-12-17

申请人： Murari Sridharan ,  Deepak Bansal ,  Eran Yariv ,  Ronen Barenboim ,  Maxim Stepin ,  Alexander Malysh

发明人： Murari Sridharan ,  Deepak Bansal ,  Eran Yariv ,  Ronen Barenboim ,  Maxim Stepin ,  Alexander Malysh

IPC分类号： G06F15/16

CPC分类号： H04L69/16 ,  H04L69/163

摘要： Discovery of intermediate network devices is performed using a technique that piggybacks upon the existing standard TCP (Transport Control Protocol) “SACK” (Selective Acknowledgment) option in a SYN/ACK packet so that discovery information may be shared between pair-wise-deployed peer intermediate devices when a TCP/IP connection (Transport Control Protocol/Internet Protocol) is first established between network endpoints using a conventional three-way handshake. Use of the SACK option is combined with another technique which comprises modifying the original 16-bit value of the TCP receive window size to a special arbitrary value to mark a SYN packet as being generated by a first peer device. The marked SYN when received by the second peer device triggers that device's discovery information to be piggybacked in the SACK option of the SYN/ACK packet. The first device then piggybacks its discovery information in the SACK option of the ACK packet which completes the three-way handshake.

摘要翻译： 使用搭载SYN / ACK分组中的现有标准TCP（传输控制协议）“SACK”（选择性确认）选项的技术来执行中间网络设备的发现，使得发现信息可以在成对部署的对等体之间共享 当使用传统的三次握手在网络端点之间首先建立TCP / IP连接（传输控制协议/互联网协议）时的中间设备。 使用SACK选项与另一种技术相结合，其中包括将TCP接收窗口大小的原始16位值修改为特殊任意值，以将SYN分组标记为由第一对等设备生成。 标记的SYN在第二个对等设备接收时触发该设备的发现信息被捎带在SYN / ACK数据包的SACK选项中。 然后，第一个设备在ACK包的SACK选项中搭载其发现信息，完成三次握手。

公开(公告)号：US20100325280A1

公开(公告)日：2010-12-23

申请号：US12489366

申请日：2009-06-22

申请人： Avinash Jindal ,  Deepak Bansal ,  Sam Htin Moy ,  David Cheung ,  Bing Wang ,  Mani Kancherla ,  Sridhar Devarapalli

发明人： Avinash Jindal ,  Deepak Bansal ,  Sam Htin Moy ,  David Cheung ,  Bing Wang ,  Mani Kancherla ,  Sridhar Devarapalli

IPC分类号： G06F15/173 ,  G06F9/46

CPC分类号： G06F9/5083

摘要： A network device includes a plurality of blades, each having a plurality of CPU cores that process requests received by the network device. Each blade further includes an accumulator circuit. Each accumulator circuit periodically aggregates the local counter values of the CPU cores of the corresponding blade. One accumulator circuit is designated as a master, and the other accumulator circuit(s) are designated as slave(s). The slave accumulator circuits transmit their aggregated local counter values to the master accumulator circuit. The master accumulator circuit aggregates the sets of aggregated local counter values to create a set of global counter values. The master accumulator circuit transmits the global counter values to a management processor (for display), to the CPU cores located on its corresponding blade, and to each of the slave accumulator circuits. Each slave accumulator circuit then transmits the global counter values to the CPU cores located on its corresponding blade.

摘要翻译： 网络设备包括多个刀片，每个刀片具有处理由网络设备接收的请求的多个CPU内核。 每个叶片还包括一个蓄电池电路。 每个累加器电路周期性地聚集相应刀片的CPU内核的本地计数器值。 一个累加器电路被指定为主机，另一个累加器电路被指定为从机。 从累加器电路将其聚合的本地计数器值发送到主累加器电路。 主累加器电路聚合本地计数器值集合以创建一组全局计数器值。 主累加器电路将全局计数器值发送到管理处理器（用于显示），发送到位于其相应刀片上的CPU核心以及从属累加器电路中的每一个。 然后，每个从属累加器电路将全局计数器值发送到位于其相应刀片上的CPU核心。

公开(公告)号：US20090319667A1

公开(公告)日：2009-12-24

申请号：US12143748

申请日：2008-06-20

申请人： Deepak Bansal ,  Murari Sridharan ,  Narasimhan Agrahara Venkataramaiah

发明人： Deepak Bansal ,  Murari Sridharan ,  Narasimhan Agrahara Venkataramaiah

IPC分类号： G06F15/16

CPC分类号： H04L67/141 ,  H04L67/18 ,  H04L67/303 ,  H04W4/02 ,  H04W48/18 ,  H04W88/06

摘要： Aspects of the subject matter described herein relate to selecting a source interface with which to establish a connection. In aspects, a profile for each network location a host has seen is maintained in a data store. The profile includes information about the network interfaces available to a source host at the network location. This information indicates, among other things, the reliability of each interface of the source host. Based on the profile, an interface is selected with which to establish a connection. If the interface is unsuccessful in establishing the connection, the interface is de-prioritized and another interface may be selected.

摘要翻译： 本文描述的主题的方面涉及选择用于建立连接的源接口。 在方面中，主机已经看到的每个网络位置的配置文件被保存在数据存储中。 该配置文件包括有关在网络位置的源主机可用的网络接口的信息。 该信息尤其表明源主机的每个接口的可靠性。 基于配置文件，选择一个接口来建立连接。 如果接口在建立连接方面不成功，则接口被优先排序，并且可以选择另一个接口。

公开(公告)号：US20070253335A1

公开(公告)日：2007-11-01

申请号：US11412612

申请日：2006-04-27

申请人： Deepak Bansal ,  Sanjay Kaniyar ,  Xinyan Zan

发明人： Deepak Bansal ,  Sanjay Kaniyar ,  Xinyan Zan

IPC分类号： H04J3/14

CPC分类号： H04L43/10 ,  H04L41/06 ,  H04L43/0811

摘要： A computer system with black hole management. The black hole management system shares black hole status information among connections that employ the same path. The black hole status information may indicate either that a black hole exists on the path or that communications have been performed successfully on the path, indicating that no black hole exists. By sharing this information, delays in transmission caused by black hole probing may be reduced. Additionally, status information for a connection is reset when information indicates that the connection has been altered. By resetting the status information, delays in transmission associated with sending reduced sized packets over connections for which black holes were previously detected but may have been eliminated by changes in the connection, are avoided.

摘要翻译： 具有黑洞管理的电脑系统。 黑洞管理系统在采用相同路径的连接之间共享黑洞状态信息。 黑洞状态信息可以指示路径上存在黑洞或者在路径上成功执行通信，表示没有黑洞存在。 通过分享这些信息，黑洞探测引起的传输延迟可能会降低。 另外，当信息指示连接被更改时，连接的状态信息被重置。 通过重置状态信息，避免了在先前检测到黑洞但可能已经通过连接变化消除的连接上发送减小尺寸的分组的传输延迟。

公开(公告)号：US20070076726A1

公开(公告)日：2007-04-05

申请号：US11239961

申请日：2005-09-30

申请人： Kevin Weston ,  Abolade Gbadegesin ,  Deepak Bansal ,  Murari Sridharan ,  Sanjay Kaniyar

发明人： Kevin Weston ,  Abolade Gbadegesin ,  Deepak Bansal ,  Murari Sridharan ,  Sanjay Kaniyar

IPC分类号： G06F15/173 ,  H04L12/28 ,  H04L12/56

CPC分类号： H04L47/10 ,  H04L47/11 ,  H04L47/27 ,  H04L47/283

摘要： Methods of tuning a receive window. A receiving device and a sending device may be in communication over a network. The receiving device may advertise a receive window to the sending device. The size of the receive window may be adjusted over time based on one or more connection parameters, application parameters and/or operating system parameters.

摘要翻译： 调整接收窗口的方法。 接收设备和发送设备可以通过网络进行通信。 接收设备可以向发送设备通告接收窗​​口。 可以基于一个或多个连接参数，应用参数和/或操作系统参数随时间调整接收窗口的大小。

公开(公告)号：US09411656B2

公开(公告)日：2016-08-09

申请号：US12489366

申请日：2009-06-22

申请人： Avinash Jindal ,  Deepak Bansal ,  Sam Htin Moy ,  David Cheung ,  Bing Wang ,  Mani Kancherla ,  Sridhar Devarapalli

发明人： Avinash Jindal ,  Deepak Bansal ,  Sam Htin Moy ,  David Cheung ,  Bing Wang ,  Mani Kancherla ,  Sridhar Devarapalli

IPC分类号： G06F15/173 ,  G06F9/50

CPC分类号： G06F9/5083

摘要： A network device includes a plurality of blades, each having a plurality of CPU cores that process requests received by the network device. Each blade further includes an accumulator circuit. Each accumulator circuit periodically aggregates the local counter values of the CPU cores of the corresponding blade. One accumulator circuit is designated as a master, and the other accumulator circuit(s) are designated as slave(s). The slave accumulator circuits transmit their aggregated local counter values to the master accumulator circuit. The master accumulator circuit aggregates the sets of aggregated local counter values to create a set of global counter values. The master accumulator circuit transmits the global counter values to a management processor (for display), to the CPU cores located on its corresponding blade, and to each of the slave accumulator circuits. Each slave accumulator circuit then transmits the global counter values to the CPU cores located on its corresponding blade.

摘要翻译： 网络设备包括多个刀片，每个刀片具有处理由网络设备接收的请求的多个CPU内核。 每个叶片还包括一个蓄电池电路。 每个累加器电路周期性地聚集相应刀片的CPU内核的本地计数器值。 一个累加器电路被指定为主机，另一个累加器电路被指定为从机。 从累加器电路将其聚合的本地计数器值发送到主累加器电路。 主累加器电路聚合本地计数器值集合以创建一组全局计数器值。 主累加器电路将全局计数器值发送到管理处理器（用于显示），发送到位于其相应刀片上的CPU核心以及从属累加器电路中的每一个。 然后，每个从属累加器电路将全局计数器值发送到位于其相应刀片上的CPU核心。

公开(公告)号：US08775599B2

公开(公告)日：2014-07-08

申请号：US13527372

申请日：2012-06-19

申请人： Deepak Bansal ,  Parveen Patel ,  Albert Greenberg

发明人： Deepak Bansal ,  Parveen Patel ,  Albert Greenberg

IPC分类号： G06F15/173

CPC分类号： H04L47/10 ,  G06F9/5072 ,  G06F9/5077

摘要： A system that includes multiple hosts, each running a plurality of virtual machines. The system may be, for example, a cloud computing environment in which there are services and a service coordination system that communicates with the hosts and with the services. The services include a middleware management service that is configured to maintain per-tenant middleware policy for each of multiple tenants. The middleware management service causes the middleware policy to be applied to network traffic by directing network traffic to a middleware enforcement mechanism. This middleware policy is per-tenant in that it depends on an identity of a tenant.

摘要翻译： 包括多个主机的系统，每个主机运行多个虚拟机。 该系统可以是例如云计算环境，其中存在与主机和服务进行通信的服务和服务协调系统。 这些服务包括一个中间件管理服务，该服务被配置为为多个租户中的每一个维护租户的中间件策略。 中间件管理服务通过将网络流量引导到中间件执行机制，使中间件策略应用于网络流量。 这种中间件政策是租用的，因为它取决于租户的身份。

公开(公告)号：US20140115186A1

公开(公告)日：2014-04-24

申请号：US13657864

申请日：2012-10-23

申请人： Kevin T. Weston ,  Abolade Gbadegesin ,  Deepak Bansal ,  Murari Sridharan ,  Sanjay N. Kaniyar

发明人： Kevin T. Weston ,  Abolade Gbadegesin ,  Deepak Bansal ,  Murari Sridharan ,  Sanjay N. Kaniyar

IPC分类号： G06F15/16

CPC分类号： H04L69/163 ,  H04L47/27 ,  H04L47/283 ,  H04L47/30

摘要： Methods of tuning a receive window. A receiving device and a sending device may be in communication over a network. The receiving device may advertise a receive window to the sending device. The size of the receive window may be adjusted over time based on one or more connection parameters, application parameters and/or operating system parameters.

摘要翻译： 调整接收窗口的方法。 接收设备和发送设备可以通过网络进行通信。 接收设备可以向发送设备通告接收窗​​口。 可以基于一个或多个连接参数，应用参数和/或操作系统参数随时间调整接收窗口的大小。